GitHub Copilot gives agents workload-owned server authentication
GitHub added public-preview server-to-server authentication for Copilot SDK services through organization-installed GitHub Apps. Agents use short-lived installation tokens, inherit organization model and spending policies, and expose app-attributed usage for review and revocation.
Why it matters: Moving from a developer's credential to a workload-owned identity makes unattended agents easier to operate and audit at scale. It also creates a new organization-level principal whose repository reach, model use, budget and revocation path must be governed…